Senior Product Security Engineer
Tessera Labs2 months ago
Remote, BrazilSenior
Base Salary
$50k - $60k/yr
Responsibilities
- Partner with developers to embed security throughout the SDLC.
- Lead security design and architecture reviews and conduct threat modeling for new features and services.
- Perform hands-on penetration testing of web applications and APIs and translate findings into prioritized remediation work.
- Conduct secure code reviews and help define secure-coding standards and security acceptance criteria.
- Operate and tune SAST, DAST, dependency, supply-chain, and container scanning tools and triage their findings.
- Explain security risks to developers and help prevent recurring issue classes.
- Contribute security evidence and rigor to SOC 2, ISO 27001, and similar compliance programs.
Requirements
- Strong track record in product or application security with demonstrated impact on product security.
- Hands-on penetration testing experience against web applications and APIs.
- Deep understanding of modern web applications, including single-page front ends, APIs, authentication, authorization, sessions, and common attack methods such as the OWASP Top 10.
- Experience with security design reviews and threat modeling.
- Solid understanding of the SDLC and how to embed security into it.
- Strong communication skills for working directly with developers and explaining actionable risk.
- Familiarity with OWASP ZAP, Burp Suite Community Edition, Semgrep, Trivy, Grype, or Nuclei is preferred.
- A relevant offensive-security certification such as OSCP is preferred.
- Cloud security experience with AWS, Azure, or Google Cloud Platform and container or Kubernetes security experience is preferred.
- Experience supporting SOC 2, ISO 27001, or similar programs is preferred.
- Experience in enterprise or regulated environments is preferred.
Benefits
- Remote work from Brazil.
Tech Stack
Categories
About Tessera Labs
Tessera Labs builds multi-agent AI systems that automate complex enterprise workflows across platforms such as SAP, Salesforce, Workday, Snowflake, and Databricks. It sells AI automation software and services to large organizations seeking to operationalize AI in back-office and data operations. Founded in 2022 and headquartered in London, the privately held company focuses on deploying production AI within existing enterprise stacks.